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This listing of claims replaces all prior versions, and 
listings of claims in the instant application: 

Listing of Claims; 

1. (Original) A system comprising: 

a security management system comprising: 

a network security feedback and control system 
wherein said security feedback and control system 
receives a plurality of normalized events and issues 
at least one normalized command in response to a 
predefined event in said plurality of normalized 
events . 

2. (Original) The system of Claim 1 wherein said network 
security feedback and control system comprises: 

a feedback and control manager wherein said feedback 
and control manager processes said at least one normalized 
event and generates said at least one normalized command. 

3. (Original) The security management system of Claim 2 
wherein said feedback and control manager includes at least one 
rules engine wherein said rules engine includes a rule having a 
condition object that uses information from said at least one 
normalized event. 

4. (Original) The system of Claim 1 further comprising: 

a managed node coupled to said security management 
system. 
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5. (Original) The system of Claim 4 wherein said managed 
node further comprises: 

a security management agent executing on said managed 

node . 
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6. (Original) The system of Claim 5 further comprising: 

at least one managed product coupled to said security 
management agent wherein said at least one managed product 
forwards at least one of said normalized events to said 
security management agent and receives normalized commands 
from said security management agent . 



7. (Original) The system of Claim 1 further comprising: 

a security management agent coupled to said network 
security feedback and control system wherein said security 
management agent collects normalizes events and forwards 
said normalized events to said security management system. 

8. (Original) The system of Claim 7 further comprising: 

at least one managed product coupled to said security 
management agent wherein said at least one managed product 
transfers at least one normalized event to said security 
management agent . 

9. (Currently amended) A system comprising: 

an event subscription filter , said event subscription 
filter for receiving a plurality of normalized events from 
managed products and for passing normalized events, for 
which said system is registered, to a feedback and control 
manager ; and 

a feedback and control manager coupled to said event 
subscription filter , wherein said feedback and control 
manager processes at least one normalized event received 
from said event subscription filter and issues at least 
one normalized command for use in dynamically implementing 
a predefined security policy . 
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10. (Original) The system of Claim 9 further comprising: 
a knowledge database coupled to said feedback and 

control manager. 

11. (Original) The system of Claim 9 further comprising: 
a directory coupled to said feedback and control 

manager . 

12. (Original) The system of Claim 11 further 
comprising : 

a configuration adapter connected between said 
feedback and control manager and said directory. 

13. (Original) The system of Claim 9 wherein said 
feedback and control system further comprises a rules engine 
coupled to said event subscription filter. 

14. (Original) The system of Claim 9 further comprising: 
a security management agent coupled to said event 

subscription filter. 

15. (Original) The system of Claim 14 further 
comprising : 

at least one managed product coupled to said security 
management agent 
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16. (Currently amended) A method comprising: 

receiving a plurality of normalized events from 

managed products by a network security feedback and 

control system; and 

using information in said plurality of normalized 

events by said network feedback and control system in 

dynamically implementing a predefined security polic y by 
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issuing at least one normalized command in response to a 
predefined event in said plurality of normalized events . 

17. (Currently amended) A computer-program product 
comprising a computer-readable medium containing computer 
program code for a method comprising: 

receiving a plurality of normalized events from 
managed products by a network security feedback and 
control system; and 

using information in said plurality of normalized 
events by said network feedback and control system in 
dynamically implementing a predefined security policy by 
issuing at least one normalized command in response to a 
predefined event in said plurality of normalized events . 

18. (Currently amended) A structure comprising: 

means for receiving a plurality of normalized events 
from managed products by a network security feedback and 
control system; and 

means for using information in said plurality of 
normalized events by said network feedback and control 
system in dynamically implementing a predefined security 
polic y by issuing at least one normalized command in 
response to a predefined event in said plurality of 
normalized events . 

Claims 19-67. (Cancelled) 
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